My MVC5 app is configured to authenticate against Azure Active Directory as well as a 3rd-party STS, both using WSFederation and the latest OWIN middleware. I have verified that authentication against each of the partners in isolation works as expected.
Authenticating against the first of the WSFederation partners that is configured works as expected. When authenticating against the second, I see error
ID4037: The key needed to verify the signature could not be resolved from the following security key identifier (full details pasted below). If I reverse the order in which the partners are configured, the failure still occurs on the one that is configured
last. Commenting out either of the partners, everything works as expected.
Any ideas what is causing the failure? I'm using the latest release bits.
Further information:
The X509 value in the error is the correct value for the provider that is failing and, as mentioned above, if I comment ...
Go to the complete details ...